CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-4418

    🚨 CVE-2026-4418 IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection. A remotely authenticated attacker could inject...

  • CVE-2026-55644

    🚨 CVE-2026-55644 Element X iOS is a Matrix iOS Client provided by Element. Element X iOS before version 26.05.0 fails to check the URL allowlist...

  • CVE-2026-6719

    🚨 CVE-2026-6719 IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly...

  • CVE-2026-84011

    🚨 CVE-2026-84011 Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.

  • CVE-2026-111757

    🚨 CVE-2026-111757 Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.4 until 4.13.11, serveStatic can...

  • CVE-2026-111759

    🚨 CVE-2026-111759 markdown-it is a Markdown parser. Prior to 14.3.2 and 15.0.2, when typographer: true is enabled, specially crafted Markdown can...

  • CVE-2026-112247

    🚨 CVE-2026-112247 A weakness has been identified in Wuxi Wubang Security Software Five-in-One Safety Production Management Information System up...

  • CVE-2026-112248

    🚨 CVE-2026-112248 A security vulnerability has been detected in grandnode grandnode2 up to 2.3.0. This impacts the function...

  • CVE-2026-112377

    🚨 CVE-2026-112377 CCC Attestation SIG attested-tls-poc through commit 731ca82 fails to bind early attestation Evidence to the TLS connection...

  • CVE-2026-11319

    🚨 CVE-2026-11319 TickTick Android application (com.ticktick.task) 8.2.2.0 contains a path traversal vulnerability in its exported...

  • CVE-2026-1501

    🚨 CVE-2026-1501 IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation.

  • CVE-2026-1510

    🚨 CVE-2026-1510 IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection.

  • CVE-2026-3161

    🚨 CVE-2026-3161 IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to...

  • CVE-2026-3295

    🚨 CVE-2026-3295 IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting. The web app user‑supplied input is not properly...

  • CVE-2026-3303

    🚨 CVE-2026-3303 IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged...

  • CVE-2026-3628

    🚨 CVE-2026-3628 IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions.

  • CVE-2026-4405

    🚨 CVE-2026-4405 IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system.

  • CVE-2026-4413

    🚨 CVE-2026-4413 IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to...

Статистика статей

Статьи
53,082
Просмотры
222,786
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху